Got this response: "Tech companies aren't screwing you out of bounties. If they don't pay, your "discovery" probably sucks. They want to pay for real bugs, not your half-assed attempts at hacking. Stop whining and find something actually worth reporting."
Which indeed confirms that @tptacek's arguments are irrelevant in the specific case.
Got this response: "Tech companies aren't screwing you out of bounties. If they don't pay, your "discovery" probably sucks. They want to pay for real bugs, not your half-assed attempts at hacking. Stop whining and find something actually worth reporting."
Which indeed confirms that @tptacek's arguments are irrelevant in the specific case.